Windows Forensics Cookbook
上QQ阅读APP看书，第一时间看更新
上一章目录下一章

Windows Memory Acquisition and Analysis

In this chapter, we will cover the following recipes:

  • Windows memory acquisition with Belkasoft RAM Capturer
  • Windows memory acquisition with DumpIt
  • Windows memory image analysis with Belkasoft Evidence Center
  • Windows memory image analysis with Volatility
  • Variations in Windows versions
上一章目录下一章